$ rpki-client -vvf rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft File: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft (raw, json) Hash identifier: DMtNy7CIMIp7YMb0jnSyh4vaTNfelRq918k2WOz8b7E= Subject key identifier: DA:47:9D:7B:94:00:82:85:32:06:29:77:5C:ED:E2:FF:C2:CC:AB:40 Authority key identifier: 0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 Certificate issuer: /CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Certificate serial: 5774D71FB1498B2C866EB4048367B031C1F480F3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 16:06:22 +0000 Manifest this update: Mon 20 Jul 2026 16:01:22 +0000 Manifest next update: Tue 21 Jul 2026 18:30:22 +0000 Files and hashes: 1: 3130332e3233312e38312e302f32342d3234203d3e20313331373335.roa (hash: Pp4p1IAwL6T/SUuRHLsPL1o2X/hw7FiM+dsJ0iekdE8=) 2: 0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl (hash: jaQNhc7hSY6aA1l2oPEV6+8VfCjBTsyALiiaddRNh1I=) 3: 3130332e3233312e38302e302f32342d3234203d3e20313331373335.roa (hash: Si+I+kPmeWkzvO8zwLh244+U9aO/cSZUp2EBTlhcW1Q=) 4: 3130332e3233312e38332e302f32342d3234203d3e20313331373335.roa (hash: OsAoJbYittbq+gZll27kuO9hviTpRYTbYAhazIaxU6I=) 5: 3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (hash: EdEGFXLSGBP0MFU7fBfQCb+Ije/hW5JPZPkjvdhCXtQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 18:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:74:d7:1f:b1:49:8b:2c:86:6e:b4:04:83:67:b0:31:c1:f4:80:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E927CE9CFAE01959701D8BAA31AA108D9A640F6 Validity Not Before: Jul 20 16:01:22 2026 GMT Not After : Jul 21 18:30:22 2026 GMT Subject: CN=DA479D7B94008285320629775CEDE2FFC2CCAB40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:0c:69:26:f9:2b:8e:fc:36:9c:94:68:d4: 38:96:16:a5:50:19:f1:3c:b8:c9:92:57:e0:6a:76: 62:78:ba:d1:35:b2:2d:84:fe:88:0a:68:18:b5:3c: f9:da:e7:a2:a2:3e:a4:4c:be:4b:14:9b:f9:0a:fe: 92:73:3a:92:dd:e6:db:f9:ff:b2:38:8d:88:f0:f1: 05:ba:d6:fd:6d:51:35:51:19:57:71:6a:7b:16:0c: 1d:b3:6a:18:1b:df:a6:f5:30:c2:5c:2d:07:0d:51: 2c:88:e8:5f:db:93:58:8c:fb:60:a3:99:2e:af:82: 9a:21:d4:05:0c:99:6d:ce:e6:7f:bc:ee:8c:e0:1d: a9:53:b8:df:45:b2:ad:39:16:fd:fb:4b:5b:f6:4d: d6:72:82:8e:d9:59:fd:98:6d:3d:0c:ee:94:b4:5b: 3a:2e:61:ca:ae:c6:17:7e:22:7b:b1:5b:03:88:fb: 65:8a:b1:6a:63:e6:0d:7c:3d:f0:90:54:94:45:e1: 34:38:d0:0f:84:82:9d:a1:03:35:f9:a6:0c:4b:ca: 7f:9a:73:b1:75:5a:3d:01:eb:4e:2f:01:4b:0b:b1: 13:e9:ef:6a:0d:5b:86:21:95:62:a9:05:10:d4:f6: 33:f4:91:01:1f:a0:56:af:4f:ae:5b:98:82:2f:ee: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:47:9D:7B:94:00:82:85:32:06:29:77:5C:ED:E2:FF:C2:CC:AB:40 X509v3 Authority Key Identifier: keyid:0E:92:7C:E9:CF:AE:01:95:97:01:D8:BA:A3:1A:A1:08:D9:A6:40:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/0E927CE9CFAE01959701D8BAA31AA108D9A640F6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:05:78:91:09:8e:8e:dc:98:e4:0c:c4:9f:92:87:c1:cb:3b: 0a:43:8f:2e:bc:19:cc:34:20:9e:6d:46:55:4b:7c:7e:50:c6: 8c:79:5b:bb:d4:25:db:1c:4c:c6:45:c8:27:65:c1:cd:bd:35: e8:96:1e:7f:a7:3b:21:96:54:c7:1a:ca:4a:f4:1b:a4:6e:f0: 67:ce:5d:8c:66:6d:be:c4:76:d4:15:58:84:e3:25:f8:d7:65: 97:12:4e:ca:5e:db:83:58:92:8f:05:67:4f:80:1b:f8:88:d2: 4f:4c:1d:a8:19:19:a8:a4:fc:09:83:b7:f3:c2:d1:8c:02:49: 13:e8:f5:e8:f7:53:71:69:d5:7e:3a:08:d8:66:45:df:1a:ee: f1:80:5d:4f:52:7b:11:86:70:b4:3a:6d:d3:a4:01:cf:ff:0b: 31:71:7d:e4:02:86:65:a1:86:fa:14:8a:20:8d:48:63:8d:16: 14:b8:43:88:90:d4:f4:b9:7c:b6:46:f5:d1:cc:da:f6:ef:ce: 4f:c3:fa:7f:0c:b8:38:f3:2f:fc:3f:29:27:dd:8e:ae:ba:65: 29:80:6d:b3:46:98:f8:c6:d5:2a:d7:36:01:16:90:02:93:eb: 4e:3f:ea:47:26:a9:a5:c4:20:f3:8b:cb:93:68:4f:50:69:27: ce:da:15:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV3TXH7FJiyyGbrQEg2ewMcH0gPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUExMDhE OUE2NDBGNjAeFw0yNjA3MjAxNjAxMjJaFw0yNjA3MjExODMwMjJaMDMxMTAvBgNV BAMTKERBNDc5RDdCOTQwMDgyODUzMjA2Mjk3NzVDRURFMkZGQzJDQ0FCNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrAxpJvkrjvw2nJRo1DiWFqVQ GfE8uMmSV+BqdmJ4utE1si2E/ogKaBi1PPna56KiPqRMvksUm/kK/pJzOpLd5tv5 /7I4jYjw8QW61v1tUTVRGVdxansWDB2zahgb36b1MMJcLQcNUSyI6F/bk1iM+2Cj mS6vgpoh1AUMmW3O5n+87ozgHalTuN9Fsq05Fv37S1v2TdZygo7ZWf2YbT0M7pS0 WzouYcquxhd+InuxWwOI+2WKsWpj5g18PfCQVJRF4TQ40A+Egp2hAzX5pgxLyn+a c7F1Wj0B604vAUsLsRPp72oNW4YhlWKpBRDU9jP0kQEfoFavT65bmIIv7h6rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2kede5QAgoUyBil3XO3i/8LMq0AwHwYDVR0j BBgwFoAUDpJ86c+uAZWXAdi6oxqhCNmmQPYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGE0OTNiZTEtZjA2NC00OWU2LTk0OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlD RkFFMDE5NTk3MDFEOEJBQTMxQUExMDhEOUE2NDBGNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wRTkyN0NFOUNGQUUwMTk1OTcwMUQ4QkFBMzFBQTEwOEQ5QTY0 MEY2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0 OWEtY2IzZWNiZmM4ZjQ2LzAvMEU5MjdDRTlDRkFFMDE5NTk3MDFEOEJBQTMxQUEx MDhEOUE2NDBGNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4FeJEJjo7cmOQMxJ+Sh8HLOwpDjy68Gcw0 IJ5tRlVLfH5Qxox5W7vUJdscTMZFyCdlwc29NeiWHn+nOyGWVMcaykr0G6Ru8GfO XYxmbb7EdtQVWITjJfjXZZcSTspe24NYko8FZ0+AG/iI0k9MHagZGaik/AmDt/PC 0YwCSRPo9ej3U3Fp1X46CNhmRd8a7vGAXU9SexGGcLQ6bdOkAc//CzFxfeQChmWh hvoUiiCNSGONFhS4Q4iQ1PS5fLZG9dHM2vbvzk/D+n8MuDjzL/w/KSfdjq66ZSmA bbNGmPjG1SrXNgEWkAKT604/6kcmqaXEIPOLy5NoT1BpJ87aFa4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:47:42 2026 by rpki-client